HTTPfy

Port 2598 (Citrix CGP (session reliability))

Citrix Common Gateway Protocol for session reliability.

Registered (user) port, 1024-49151 TCP Remote access Do not expose to the internet

What port 2598 is used for

Citrix Common Gateway Protocol for session reliability.

Security: should port 2598 be open?

Do not expose to the internet. Behind the Citrix Gateway only.

IANA assignment

Service nameProtoDescriptionAssigneeReference
citriximaclient TCP Citrix MA Client Myk Willis -
citriximaclient UDP Citrix MA Client Myk Willis -

Check what is listening on port 2598

Linux: is anything listening on TCP 2598?
sudo ss -tlnp 'sport = :2598'
Linux / macOS: which process owns the port
sudo lsof -nP -i :2598
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':2598 '
Windows (Command Prompt)
netstat -ano | findstr :2598
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 2598 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 2598
From Windows
Test-NetConnection HOST -Port 2598

Block port 2598 in the firewall

ufw
sudo ufw deny 2598/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 2598 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 2598 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 2598' -Direction Inbound -Protocol TCP -LocalPort 2598 -Action Block

Related ports

1494Citrix ICA443HTTPS2596worldfusion22597homesteadglory2599snapd2600hpstgmgr

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.